From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from goalie.tycho.ncsc.mil (goalie [144.51.31.250]) by tarius.tycho.ncsc.mil (8.13.1/8.13.1) with ESMTP id r3AImXXY012766 for ; Wed, 10 Apr 2013 14:48:33 -0400 Message-ID: <5165B3FE.3060001@redhat.com> Date: Wed, 10 Apr 2013 14:48:30 -0400 From: Daniel J Walsh MIME-Version: 1.0 To: Rodney Simioni CC: selinux@tycho.nsa.gov Subject: Re: appending to an existing policy References: <0971982CF6B9AB418FFD5FEF7F50CB9F05D71CDA@IAD-WPRD-XCHB03.corp.verio.net> In-Reply-To: <0971982CF6B9AB418FFD5FEF7F50CB9F05D71CDA@IAD-WPRD-XCHB03.corp.verio.net> Content-Type: text/plain; charset=ISO-8859-1 Sender: owner-selinux@tycho.nsa.gov List-Id: selinux@tycho.nsa.gov -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 04/10/2013 02:24 PM, Rodney Simioni wrote: > I just created a custom policy and did the semodule -i test.te. > > > > I reran all my tests after a few days and I noticed there were additional > AVC denials in the audit.log. > > > > I want to add the new stuff to my existing test.te file so that I won't > have multiple policies. I just want to have one policy and just keep adding > to it, is that possible and how? Thanks in advance. > > > This email message is intended for the use of the person to whom it has > been sent, and may contain information that is confidential or legally > protected. If you are not the intended recipient or have received this > message in error, you are not authorized to copy, distribute, or otherwise > use this message or its attachments. Please notify the sender immediately > by return e-mail and permanently delete this message and any attachments. > Verio Inc. makes no warranty that this email is error or virus free. Thank > you. > Yes just recreate the te file with the additions or do a audit2allow -la >> test.te vi test.te # To make sure the rules added are what you want. make -f /usr/share/selinux/devel/Makefile semodule -i test.pp -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.13 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlFls/0ACgkQrlYvE4MpobNktgCeMSmaNBPgPObxA+a3VoIkUsQM eCMAnikWXxVHVvR5wR6Gs5ssYiV2PX7q =UHgP -----END PGP SIGNATURE----- -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.